WAF not blocking sql injection

0

Hi,

How can I check WAF sql injection implementation rule?

We received the request below and WAF sql injection rule didn't block it.

a piece of the request body:

{"id":"'nvOpzp; AND 1=1 OR (<'\">iKO)),"}

Thanks

질문됨 일 년 전530회 조회
2개 답변
0

What rules do you currently have in place?
For the AWS Managed Ruleset, the "AWSManagedRulesSQLiRuleSet" can be set to protect against SQL injection.
https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-use-case.html#aws-managed-rule-groups-use-case-sql-db

Also note that even matching requests will not be blocked unless the rule is set to block instead of count.
https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-action.html

profile picture
전문가
답변함 일 년 전
0

Hi Riku, thanks for you answer.

I have the rule AWSManagedRulesSQLiRuleSet active and also blocking.

I also check in WAF log and the request body is less than 8KB and requestBodySizeInspectedByWAF is equals to requestBodySize, so WAF is checking and allowing the request.

Shouldn't this request be blocked?

Thanks

답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인